---
title: "Glossary | KYE Protocol™"
description: "190 KYE Protocol™ terms in 16 groups, in plain English: one paragraph per term, linked to its schema and its dictionary code."
url: https://kyeprotocol.com/glossary/
lang: en
source: "KYE Protocol"
---

> 190 KYE Protocol™ terms in 16 groups, in plain English: one paragraph per term, linked to its schema and its dictionary code.

Glossary

# Every KYE Protocol™ term, in plain English.

190 terms in 16 groups. One paragraph per term, as published on the live site.

Search the glossary

Core protocol 14 Runtime 13 Evidence 10 Continuity 10 Discoverability 10 Search · Memory · Mapping · Reporting 5 Ontology 13 Operating Model 16 Assurance 15 Formal Rules 17 Admissibility 9 Compliance 5 Program 8 Framework dictionary 27 External standards we compose with 7 Human-control surface for AI authority 11

## Core protocol 14 terms

Identity, authority, and the chain.

[Core protocol Entity Anything the protocol can name and reason about.](https://kyeprotocol.com/glossary/entity/) [Core protocol URN The canonical identifier format.](https://kyeprotocol.com/glossary/urn/) [Core protocol Actor The entity actually performing an action.](https://kyeprotocol.com/glossary/actor/) [Core protocol Principal The entity on whose behalf the actor is acting.](https://kyeprotocol.com/glossary/principal/) [Core protocol on-behalf-of The relationship between actor and principal.](https://kyeprotocol.com/glossary/on-behalf-of/) [Core protocol Delegation A signed grant from one entity to another.](https://kyeprotocol.com/glossary/delegation/) [Core protocol Authority The protocol's noun for "what an entity is allowed to cause to happen." Authority binds a capability + scope + state to an actor + principal pair.](https://kyeprotocol.com/glossary/authority/) [Core protocol Capability The named verb in the action vocabulary — e.g., payment.initiate , data.read .](https://kyeprotocol.com/glossary/capability/) [Core protocol Scope The constraint set bounding an authority — amount cap, currency, corridor, time window, beneficiary allowlist, etc.](https://kyeprotocol.com/glossary/scope/) [Core protocol Attenuation The rule that a child authority's scope must be a subset (⊇) of its parent's.](https://kyeprotocol.com/glossary/attenuation/) [Core protocol State The current lifecycle status of an entity / authority / payload — e.g., active, quarantined, suspended, revoked.](https://kyeprotocol.com/glossary/state/) [Core protocol Authority Graph™ The protocol's view of entities + delegations + authorities + capabilities + scopes as a typed graph.](https://kyeprotocol.com/glossary/authority-graph/) [Core protocol KYE™ Chain of Authority™ The structural artefact.](https://kyeprotocol.com/glossary/chain-of-authority/) [Core protocol Purpose Permission™ The purpose and scope rail.](https://kyeprotocol.com/glossary/purpose-permission/)

## Runtime 13 terms

Decision, enforcement, cascade.

[Runtime Decision The runtime's verdict on a single requested action.](https://kyeprotocol.com/glossary/decision/) [Runtime Decision codes The standard set. allow\_with\_constraints , require\_approval , deny .](https://kyeprotocol.com/glossary/decision-codes/) [Runtime Decision Map™ The signed, replayable artefact emitted with every authorise call.](https://kyeprotocol.com/glossary/decision-map/) [Runtime PEP — Policy Enforcement Point The component that intercepts an action and asks the PDP for a decision.](https://kyeprotocol.com/glossary/pep/) [Runtime PDP — Policy Decision Point The component that evaluates the request against authorities + state + scope and returns a decision.](https://kyeprotocol.com/glossary/pdp/) [Runtime ePDP — Edge PDP A locally-cached, offline-capable PDP for the bank/merchant edge.](https://kyeprotocol.com/glossary/epdp/) [Runtime Cascade The propagation pattern applied when an upstream authority is revoked or quarantined.](https://kyeprotocol.com/glossary/cascade/) [Runtime Authority Finality™ The protocol-level \*property\* that a request's KYE™ Chain of Authority™ is provably terminal — verified end-to-end with public keys alone before the…](https://kyeprotocol.com/glossary/authority-finality/) [Runtime Authority Finality™ Diagnostic The free 24-question / 6-lens self-assessment that scores an organisation's agentic AI authority posture on a 0–100 scale across 5 bands…](https://kyeprotocol.com/glossary/authority-finality-diagnostic/) [Runtime Agent-as-Contracting-Party The legal posture in which an AI agent's authority — the delegation it acts under, the purpose-permission it is scoped to, the revocation conditions…](https://kyeprotocol.com/glossary/agent-as-contracting-party/) [Runtime KYE™ Reconciliation Engine™ The check that what you declared is what you actually deployed.](https://kyeprotocol.com/glossary/kye-reconciliation-engine/) [Runtime KYE™ Edge Governance™ Governance that still reaches a verdict when the network does not.](https://kyeprotocol.com/glossary/kye-edge-governance/) [Runtime Cohesion Cascade™ The discipline that keeps the system one coherent state.](https://kyeprotocol.com/glossary/cohesion-cascade/)

## Evidence 10 terms

Audit chain, packs, replay.

[Evidence Audit chain The append-only, hash-linked sequence of audit events the runtime emits.](https://kyeprotocol.com/glossary/audit-chain/) [Evidence Evidence Pack™ A signed bundle of audit-chain entries + Decision Maps™ + signatures + public-key set, replayable end-to-end with public keys alone.](https://kyeprotocol.com/glossary/evidence-pack/) [Evidence Evidence Graph™ The graph view across multiple evidence packs — how decisions, authorities.](https://kyeprotocol.com/glossary/evidence-graph/) [Evidence Blast Radius Map™ The view of which downstream authorities and active sessions a single revocation or quarantine signal will reach.](https://kyeprotocol.com/glossary/blast-radius-map/) [Evidence Proof bundle The transport format for an evidence pack.](https://kyeprotocol.com/glossary/proof-bundle/) [Evidence Payload state The lifecycle status of a single payload.](https://kyeprotocol.com/glossary/payload-state/) [Evidence Canonicalisation JCS (RFC 8785) canonical JSON form, used for hashing and signing.](https://kyeprotocol.com/glossary/canonicalisation/) [Evidence Ed25519 The default signing primitive across credentials and proof bundles.](https://kyeprotocol.com/glossary/ed25519/) [Evidence Resilience Loop™ The evidence and replay rail.](https://kyeprotocol.com/glossary/resilience-loop/) [Evidence Delegated Auditability™ Letting an auditor verify your governance without handing them access to your production systems or your customers’ data.](https://kyeprotocol.com/glossary/delegated-auditability/)

## Continuity 10 terms

Decision values, drift types, evidence pack.

[Continuity KYE™ Continuity Profile™ The runtime profile that binds interpreted intent vs declared intent, multi-dimension authority state, pressure context, incentive context and…](https://kyeprotocol.com/glossary/continuity-profile/) [Continuity Authority Continuity™ The protocol-level property that an actor's authority at decision time matches the authority granted by its delegation chain — no scope drift, no…](https://kyeprotocol.com/glossary/authority-continuity/) [Continuity Agency Continuity™ The protocol-level property that an actor's interpreted goal at decision time matches its declared intent.](https://kyeprotocol.com/glossary/agency-continuity/) [Continuity Continuity decision values The standard set includes continuity\_preserved , continuity\_degraded and continuity\_broken .](https://kyeprotocol.com/glossary/continuity-decision/) [Continuity Drift types Ten named categories.](https://kyeprotocol.com/glossary/drift-types/) [Continuity Continuity Decision Map™ The signed, replayable artefact bound to a single continuity decision.](https://kyeprotocol.com/glossary/continuity-decision-map/) [Continuity Continuity Evidence Pack™ A signed bundle composing intent + interpretation + 6-dimension state + pressure + incentive + decision + execution + drift events under…](https://kyeprotocol.com/glossary/continuity-evidence-pack/) [Continuity KYEAgencyDriftEvent One record per detected drift, signed and hash-chained into the audit ledger.](https://kyeprotocol.com/glossary/agency-drift-event/) [Continuity KYE™ Continuity Gateway™ Runtime extension to the reference Gateway adding the continuity decision surface + drift-event endpoints.](https://kyeprotocol.com/glossary/continuity-gateway/) [Continuity KYE™ Agency Drift Monitor™ Drift detection + alerting surface (planned commercial layer).](https://kyeprotocol.com/glossary/agency-drift-monitor/)

## Discoverability 10 terms

Directory, path finder, risk discovery.

[Discoverability KYE™ Discoverability Profile™ The runtime profile that turns a cryptographically-bound authority graph into a queryable surface, with role-and-purpose discovery policy, row-level…](https://kyeprotocol.com/glossary/discoverability-profile/) [Discoverability Discovery modes The standard set. directory\_lookup , path\_finder , graph\_walk , risk\_discovery , connector\_discovery , evidence\_finder .](https://kyeprotocol.com/glossary/discovery-modes/) [Discoverability Risk-discovery types Three non-mutating traversals.](https://kyeprotocol.com/glossary/risk-discovery-types/) [Discoverability KYE™ Authority Directory™ The directory index of cryptographically-bound authority records.](https://kyeprotocol.com/glossary/authority-directory/) [Discoverability KYE™ Discovery Console™ The operator surface over the directory + path finder + risk discovery.](https://kyeprotocol.com/glossary/discovery-console/) [Discoverability KYE™ Authority Path Finder™ The path-resolution engine over the authority graph — given (principal, actor, capability), returns one or more delegation paths with edge-by-edge…](https://kyeprotocol.com/glossary/authority-path-finder/) [Discoverability KYE™ Evidence Finder™ The resolver over audit-event and evidence-pack indexes.](https://kyeprotocol.com/glossary/evidence-finder/) [Discoverability KYE™ Connector Discovery Hub™ The discovery surface for Connector Profile™ implementations and their conformance state.](https://kyeprotocol.com/glossary/connector-discovery-hub/) [Discoverability Discovery policy The selection rule on (role, purpose, requester-tenant, target-tenant) that determines which authority records appear in a result set and which…](https://kyeprotocol.com/glossary/discovery-policy/) [Discoverability Federation trust The cross-trust-domain trust signal that gates whether a discovery query may traverse an edge into another tenant's authority graph.](https://kyeprotocol.com/glossary/federation-trust/)

## Search · Memory · Mapping · Reporting 5 terms

Four new sub-engines.

[Search · Memory · Mapping · Reporting KYE™ Data Mapping Agent™ Sub-engine of the Directory Engine.](https://kyeprotocol.com/glossary/data-mapping-agent/) [Search · Memory · Mapping · Reporting KYE™ Native Search Engine™ Sub-engine of the Directory Engine.](https://kyeprotocol.com/glossary/native-search-engine/) [Search · Memory · Mapping · Reporting KYE™ Memory Engine™ Sub-engine of the Decision Engine.](https://kyeprotocol.com/glossary/memory-engine/) [Search · Memory · Mapping · Reporting KYE™ Reporting Engine™ Sub-engine of the Evidence Engine.](https://kyeprotocol.com/glossary/reporting-engine/) [Search · Memory · Mapping · Reporting reports@kyeprotocol.com The canonical auto-delivery From-address for sealed compliance reports.](https://kyeprotocol.com/glossary/reports-email/)

## Ontology 13 terms

Semantic layer — shared meaning, not just permission.

[Ontology KYE™ Ontology Profile™ The semantic layer of KYE™.](https://kyeprotocol.com/glossary/ontology-profile/) [Ontology Ontology domain One of twelve domains every KYE™ term must declare.](https://kyeprotocol.com/glossary/ontology-domain/) [Ontology Predicate Stable predicate dictionary.](https://kyeprotocol.com/glossary/ontology-predicate/) [Ontology Mapping type Six explicit categories.](https://kyeprotocol.com/glossary/mapping-type/) [Ontology KYE™ ontology term One canonical term in the registry.](https://kyeprotocol.com/glossary/ontology-term/) [Ontology KYE™ ontology relationship One predicate triple (subject, predicate, object) with constraints + evidence requirements.](https://kyeprotocol.com/glossary/ontology-relationship/) [Ontology KYE™ ontology mapping External-system → KYE™ term mapping with mapping\_type , confidence.](https://kyeprotocol.com/glossary/ontology-mapping/) [Ontology KYE™ Semantic Assertion A signed record bound to a runtime decision listing every term, mapping and predicate consulted.](https://kyeprotocol.com/glossary/semantic-assertion/) [Ontology KYE™ Ontology Registry™ Managed registry for terms, relationships, mappings and semantic assertions.](https://kyeprotocol.com/glossary/ontology-registry/) [Ontology KYE™ Semantic Authority Mapper™ Maps OAuth scopes, IAM roles, payment mandates, legal delegations, healthcare consents, API permissions and sector terms into KYE™ without losing…](https://kyeprotocol.com/glossary/semantic-authority-mapper/) [Ontology KYE™ Semantic Graph™ Graph view of the ontology + live instances.](https://kyeprotocol.com/glossary/semantic-graph/) [Ontology KYE™ Ontology Conformance™ Conformance fixture suite + certification track for ontology-correct implementations.](https://kyeprotocol.com/glossary/ontology-conformance/) [Ontology JSON-LD context Recommended semantic-interoperability serialisation.](https://kyeprotocol.com/glossary/jsonld-context/)

## Operating Model 16 terms

Adoption layer — from readiness to runtime control.

[Operating Model KYE™ Operating Model Profile™ The enterprise adoption layer of KYE™.](https://kyeprotocol.com/glossary/operating-model-profile/) [Operating Model Journey stages Ten ordered stages. intake , assess , classify , map\_authority , place\_gates , configure\_runtime , execute , evidence , review , improve .](https://kyeprotocol.com/glossary/journey-stages/) [Operating Model Use-case intake Initial proposal for a delegated AI worker.](https://kyeprotocol.com/glossary/use-case-intake/) [Operating Model Readiness assessment Multi-dimension assessment plus a readiness score plus the required profiles, gates and evidence for the assessed entity.](https://kyeprotocol.com/glossary/readiness-assessment/) [Operating Model Entity Authority Record™ Living governance record per delegated actor — owner, accountable entity, purpose, lifecycle state, risk tier, approved + prohibited capabilities,…](https://kyeprotocol.com/glossary/entity-authority-record/) [Operating Model KYE™ Authority Gates™ Runtime gate placed before high-impact delegated actions.](https://kyeprotocol.com/glossary/authority-gates/) [Operating Model KYE™ Commit Boundary™ Separates recommendation from committed action.](https://kyeprotocol.com/glossary/commit-boundary/) [Operating Model Review path Multi-step human-review chain with required role, decision options, optional condition and SLA per step.](https://kyeprotocol.com/glossary/review-path/) [Operating Model Adoption Evidence Pack™ Signed bundle composing intake + readiness + authority record + gates + commit boundaries + review paths + training + sample runtime decisions.](https://kyeprotocol.com/glossary/adoption-evidence-pack/) [Operating Model KYE™ Governed Entity Catalog™ entry Discovery entry per governed entity — agent, model, tool, service, connector, app, plugin, profile or certified implementation.](https://kyeprotocol.com/glossary/governed-catalog-entry/) [Operating Model KYE™ AI Worker Readiness App™ Assess whether an AI worker is ready for pilot, controlled execution or production deployment.](https://kyeprotocol.com/glossary/readiness-app/) [Operating Model KYE™ Cloud Portal™ Enterprise dashboard tying use-cases, agents, gates, boundaries, decisions, evidence packs, training and certification together.](https://kyeprotocol.com/glossary/cloud-portal/) [Operating Model KYE™ Academy™ Training and certification track for KYE™ Operating Model Profile™ owners and operators.](https://kyeprotocol.com/glossary/academy/) [Operating Model KYE™ Comms Engine™ The one engine every outbound message from every KYE Protocol™ surface passes through.](https://kyeprotocol.com/glossary/kye-comms-engine/) [Operating Model KYE™ Billing Meters™ Usage metering for governed activity.](https://kyeprotocol.com/glossary/kye-billing-meters/) [Operating Model KYE™ Onboarding Agent™ The guided path from first contact to a working, governed tenant.](https://kyeprotocol.com/glossary/kye-onboarding-agent/)

## Assurance 15 terms

Living lifecycle assurance — system cards become executable.

[Assurance KYE™ Assurance Card Profile™ The lifecycle assurance layer of KYE™.](https://kyeprotocol.com/glossary/assurance-card-profile/) [Assurance KYE™ Assurance Card™ Living lifecycle record per delegated entity — owner, accountable entity, intended use, prohibited uses, authority model, human involvement,…](https://kyeprotocol.com/glossary/assurance-card/) [Assurance Assurance lifecycle stages Eight stages. design , pilot , deploy , monitor , incident\_review , scope\_change\_review , retention\_review , decommission .](https://kyeprotocol.com/glossary/assurance-lifecycle/) [Assurance KYE™ Human Involvement Plan™ Schema-bound record of points where authorised humans must influence, direct, limit, approve, override or review an AI-enabled system.](https://kyeprotocol.com/glossary/human-involvement-plan/) [Assurance Human involvement types Six types. influence , direct , limit , approve , override , review .](https://kyeprotocol.com/glossary/involvement-types/) [Assurance KYE™ Provenance Evidence Provenance + supply-chain dimension — model / dataset / tool / hardware / supplier / licence references with verification status.](https://kyeprotocol.com/glossary/provenance-evidence/) [Assurance KYE™ Assurance Review Cycle™ Scheduled + event-triggered review windows.](https://kyeprotocol.com/glossary/assurance-review-cycle/) [Assurance KYE™ Decommissioning Plan Retention windows, off-boarding step sequence, cascade-revocation scope, evidence-archival policy, post-execution verification.](https://kyeprotocol.com/glossary/decommissioning-plan/) [Assurance Off-boarding actions Eight named actions. revoke\_authority , quarantine\_credentials , rotate\_keys , archive\_evidence , notify\_owner , notify\_supplier , update\_catalog ,…](https://kyeprotocol.com/glossary/off-boarding-actions/) [Assurance KYE™ Assurance Card Builder™ Generate living assurance cards from KYE™ runtime objects.](https://kyeprotocol.com/glossary/assurance-card-builder/) [Assurance KYE™ Assurance Card Library™ Discoverable library of governed AI use cases + assurance patterns.](https://kyeprotocol.com/glossary/assurance-card-library/) [Assurance KYE™ Human Involvement Planner™ Define where authorised humans must review, approve, limit or override AI-enabled actions across the lifecycle.](https://kyeprotocol.com/glossary/human-involvement-planner/) [Assurance KYE™ Provenance & Supply Chain Evidence App™ Track datasets, models, tools, suppliers, licences and hardware lineage as runtime-bound evidence.](https://kyeprotocol.com/glossary/provenance-app/) [Assurance KYE™ Assurance Review Scheduler™ Scheduled + event-triggered + scope-change + incident + retention + decommissioning review cycles.](https://kyeprotocol.com/glossary/assurance-review-scheduler/) [Assurance KYE™ Governed Use Case Library™ Sector-curated library of governed AI use cases linking authority records, gates, commit boundaries, decisions, evidence packs and assurance cards.](https://kyeprotocol.com/glossary/governed-use-case-library/)

## Formal Rules 17 terms

Rights, obligations, prohibitions, powers — enforceable.

[Formal Rules KYE™ Formal Rules Profile™ The rights, obligations and governance layer of KYE™.](https://kyeprotocol.com/glossary/formal-rules-profile/) [Formal Rules Rule families Six families. permission , obligation , prohibition , power , immunity , exception .](https://kyeprotocol.com/glossary/rule-families/) [Formal Rules Normative operators Compact operator notation.](https://kyeprotocol.com/glossary/normative-operators/) [Formal Rules KYE™ Permission Standing rule that an actor MAY perform a capability under defined scope + state.](https://kyeprotocol.com/glossary/kye-permission/) [Formal Rules KYE™ Obligation Lifecycle object — actor MUST perform a required action by a deadline.](https://kyeprotocol.com/glossary/kye-obligation/) [Formal Rules KYE™ Prohibition Standing rule — actor MUST NOT perform the prohibited capability.](https://kyeprotocol.com/glossary/kye-prohibition/) [Formal Rules KYE™ Power Authority to create, modify, revoke, waive or override a normative state.](https://kyeprotocol.com/glossary/kye-power/) [Formal Rules KYE™ Exception A rule that displaces or modifies another rule under enumerated exceptional conditions (incident response, business continuity, regulatory…](https://kyeprotocol.com/glossary/kye-exception/) [Formal Rules KYE™ Governance Rule Meta-rule on who may override which rules, under what conditions, with what evidence.](https://kyeprotocol.com/glossary/kye-governance-rule/) [Formal Rules KYE™ Rule Conflict Detected conflict between two or more rules with the resolution strategy applied (e.g., specific overrides general, prohibition overrides permission).](https://kyeprotocol.com/glossary/kye-rule-conflict/) [Formal Rules KYE™ Rule Proof Test result over a rule set checking enumerated consistency properties.](https://kyeprotocol.com/glossary/kye-rule-proof/) [Formal Rules KYE™ Obligation State One state-transition record on a KYEObligation .](https://kyeprotocol.com/glossary/kye-obligation-state/) [Formal Rules KYE™ Rights & Obligations Engine™ Runtime engine that evaluates permissions, obligations, prohibitions, powers, exceptions and governance rules.](https://kyeprotocol.com/glossary/kye-rights-obligations-engine/) [Formal Rules KYE™ Obligation Ledger™ Append-only ledger tracking every obligation lifecycle, hash-chained into the audit ledger.](https://kyeprotocol.com/glossary/kye-obligation-ledger/) [Formal Rules KYE™ Rule Prover™ Pre-runtime consistency checker for rule sets — conflicts, unbounded obligations, missing satisfaction paths, circular delegation, override gaps.](https://kyeprotocol.com/glossary/kye-rule-prover/) [Formal Rules KYE™ Control Compiler™ Compiles formal KYE™ rules into runtime PDP/PEP policies, authority gates, commit boundaries, signal events and evidence requirements.](https://kyeprotocol.com/glossary/kye-rule-compiler/) [Formal Rules KYE™ Contract-to-Authority Mapper™ Phase-2 — extracts permissions, obligations, prohibitions and powers from contracts, policies and mandates into KYE™ formal rules.](https://kyeprotocol.com/glossary/kye-contract-to-authority-mapper/)

## Admissibility 9 terms

Pre-action layer — before authority.

[Admissibility KYE™ Action Admissibility Profile™ The upstream pre-action layer of KYE™.](https://kyeprotocol.com/glossary/action-admissibility-profile/) [Admissibility KYE™ Proposed Action The candidate action submitted to KYE™ Admission Gate™ for admissibility check before any authority decisioning.](https://kyeprotocol.com/glossary/kye-proposed-action/) [Admissibility KYE™ Admission Gate™ Pre-admission gate placed UPSTREAM of authority gates.](https://kyeprotocol.com/glossary/kye-admission-gate/) [Admissibility Admissibility decision values Six values. admit , reject , require\_clarification , require\_human\_review , quarantine , route\_to\_authority\_check .](https://kyeprotocol.com/glossary/admissibility-decisions/) [Admissibility Inadmissibility classes Fifteen classes the engine actively detects.](https://kyeprotocol.com/glossary/inadmissibility-classes/) [Admissibility KYE™ Admissibility Decision Signed verdict for a proposed action with checked dimensions, next-step routing, obligations and reference to the admissibility-evidence record.](https://kyeprotocol.com/glossary/kye-admissibility-decision/) [Admissibility KYE™ Admissibility Evidence Hash-chained record of the inputs and signals consulted at admission time.](https://kyeprotocol.com/glossary/kye-admissibility-evidence/) [Admissibility KYE™ Admissibility Engine™ Runtime engine performing the admission check across intent, source, data, policy and rule dimensions.](https://kyeprotocol.com/glossary/kye-admissibility-engine/) [Admissibility KYE™ Pre-Action Filter™ Product-friendly synonym for the admission surface in marketing copy.](https://kyeprotocol.com/glossary/kye-pre-action-filter/)

## Compliance 5 terms

Mapping rail, OSCAL, frameworks.

[Compliance Control mapping The named link from a protocol artefact to a regulatory control — e.g., evidence pack → SOC 2 CC7.2.](https://kyeprotocol.com/glossary/control-mapping/) [Compliance KYE™ Compliance Mapping Rail™ The runtime channel through which evidence becomes per-framework projection.](https://kyeprotocol.com/glossary/compliance-mapping-rail/) [Compliance AI System Compliance Card™ The public-key-verifiable nutrition label for any AI system.](https://kyeprotocol.com/glossary/compliance-card/) [Compliance Profile One of 10 canonical conformance profiles — core , pdp , epdp , spdp , pep , runtime-authority , evidence-replay , connector , manifest , conformance .](https://kyeprotocol.com/glossary/profile/) [Compliance Non-goals Things the protocol explicitly does NOT do — replace SCA, replace tokenisation, run fraud scoring, etc.](https://kyeprotocol.com/glossary/non-goals/)

## Program 8 terms

Conformance, certification, partner ladder.

[Program Conformance pack The 133 black-box fixtures any implementation runs to demonstrate spec compliance.](https://kyeprotocol.com/glossary/conformance-pack/) [Program KYE™ Self-Tested™ L1 of the conformance ladder.](https://kyeprotocol.com/glossary/kye-self-tested/) [Program KYE™ Self-Attested™ L2. Signed self-attestation (Ed25519, JWS) bundled with fixture results.](https://kyeprotocol.com/glossary/kye-self-attested/) [Program KYE™ Conformant™ L3. Program-reviewed conformance report + badge + registry listing.](https://kyeprotocol.com/glossary/kye-conformant/) [Program KYE™ Certified™ L4. Third-party-audited certification by an approved firm.](https://kyeprotocol.com/glossary/kye-certified/) [Program KYE™ Cloud Gateway™ The optional commercial layer.](https://kyeprotocol.com/glossary/kye-cloud-gateway/) [Program RFC The four-stage process for landing changes.](https://kyeprotocol.com/glossary/rfc/) [Program Universal Engagement Rail One intake surface for every external party — pilot, partner, trainer, auditor.](https://kyeprotocol.com/glossary/engagement-rail/)

## Framework dictionary 27 terms

Regulator terms KYE™ binds, by framework.

[Framework dictionary Annex III high-risk system (EU AI Act Art 6) (EU AI Act Art 6)](https://kyeprotocol.com/glossary/eu-ai-act-annex-iii/) [Framework dictionary EU AI Act Art 9 — Risk management — Risk management](https://kyeprotocol.com/glossary/eu-ai-act-art9/) [Framework dictionary EU AI Act Art 12 — Record-keeping — Record-keeping](https://kyeprotocol.com/glossary/eu-ai-act-art12/) [Framework dictionary EU AI Act Art 13 — Transparency to deployer — Transparency to deployer](https://kyeprotocol.com/glossary/eu-ai-act-art13/) [Framework dictionary EU AI Act Art 50 — Interaction disclosure — Interaction disclosure](https://kyeprotocol.com/glossary/eu-ai-act-art50/) [Framework dictionary HAARF §4.2 verifiable-by-third-party verifiable-by-third-party](https://kyeprotocol.com/glossary/haarf-42/) [Framework dictionary HAARF Risk-Reduction-per-Effort HAARF v1.0 ranking heuristic for guard recommendations.](https://kyeprotocol.com/glossary/haarf-risk-reduction/) [Framework dictionary SR 11-7 §V — Model risk management — Model risk management](https://kyeprotocol.com/glossary/sr-11-7-v/) [Framework dictionary SR 11-7 §VI — Model inventory — Model inventory](https://kyeprotocol.com/glossary/sr-11-7-vi/) [Framework dictionary DORA Art 28 — Critical third-party — Critical third-party](https://kyeprotocol.com/glossary/dora-art28/) [Framework dictionary DORA Art 6 — ICT risk framework — ICT risk framework](https://kyeprotocol.com/glossary/dora-art6/) [Framework dictionary GDPR Art 30 — Record of Processing Activities (RoPA) — Record of Processing Activities (RoPA)](https://kyeprotocol.com/glossary/gdpr-art30/) [Framework dictionary GDPR Art 44-49 — Cross-border transfers — Cross-border transfers](https://kyeprotocol.com/glossary/gdpr-art44-49/) [Framework dictionary GDPR Art 35 — DPIA — DPIA](https://kyeprotocol.com/glossary/gdpr-art35/) [Framework dictionary SEC 17a-4(f) — Records preservation — Records preservation](https://kyeprotocol.com/glossary/sec-17a-4/) [Framework dictionary FINRA 4511(d) — Books and records — Books and records](https://kyeprotocol.com/glossary/finra-4511/) [Framework dictionary PCI DSS 6.4.1 — Segregated environments — Segregated environments](https://kyeprotocol.com/glossary/pci-dss-641/) [Framework dictionary ISO 42001 Annex A.4 — Lifecycle — Lifecycle](https://kyeprotocol.com/glossary/iso-42001/) [Framework dictionary ISO 27001 9.1 — Monitoring of operational controls — Monitoring of operational controls](https://kyeprotocol.com/glossary/iso-27001-9-1/) [Framework dictionary NIST AI RMF GOVERN-1.2 — Traceability — Traceability](https://kyeprotocol.com/glossary/nist-ai-rmf-govern-1-2/) [Framework dictionary NIST 800-207 — Zero Trust Architecture — Zero Trust Architecture](https://kyeprotocol.com/glossary/nist-800-207/) [Framework dictionary BCBS 239 §6 — Maker-checker / dual control — Maker-checker / dual control](https://kyeprotocol.com/glossary/bcbs-239-s6/) [Framework dictionary FCA OpRes IBS — Important Business Service — Important Business Service](https://kyeprotocol.com/glossary/fca-opres-ibs/) [Framework dictionary MHRA SaMD & AI UK Medicines and Healthcare products Regulatory Agency Software-as-a-Medical-Device regime.](https://kyeprotocol.com/glossary/mhra-samd/) [Framework dictionary OSCAL — Open Security Controls Assessment Language (NIST) (NIST)](https://kyeprotocol.com/glossary/oscal/) [Framework dictionary HIPAA §164.312 — Technical safeguards — Technical safeguards](https://kyeprotocol.com/glossary/hipaa-164-312/) [Framework dictionary UK NCSC CAF Principle B6 — Staff awareness & training — Staff awareness & training](https://kyeprotocol.com/glossary/ncsc-caf-b6/)

## External standards we compose with 7 terms

For reference, not redefinition.

[External standards we compose with OAuth 2.0 / OIDC Human-centric authorisation + identity federation.](https://kyeprotocol.com/glossary/oauth/) [External standards we compose with SPIFFE / SPIRE Workload identity for services.](https://kyeprotocol.com/glossary/spiffe/) [External standards we compose with MCP — Model Context Protocol Tool / agent communication protocol.](https://kyeprotocol.com/glossary/mcp/) [External standards we compose with KYA — Know Your Agent The general industry term for agent attestation.](https://kyeprotocol.com/glossary/kya/) [External standards we compose with PSD3 EU revised Payment Services Directive.](https://kyeprotocol.com/glossary/psd3/) [External standards we compose with DORA EU Digital Operational Resilience Act.](https://kyeprotocol.com/glossary/dora/) [External standards we compose with EU AI Act The Union's horizontal AI regulation.](https://kyeprotocol.com/glossary/eu-ai-act/)

## Human-control surface for AI authority 11 terms

KYE™ GovernedUI™ — the visible control layer.

[Human-control surface for AI authority KYE™ GovernedUI™ The human-facing control layer.](https://kyeprotocol.com/glossary/governedui/) [Human-control surface for AI authority Action Approval Pre-action human review of an agent’s proposed action.](https://kyeprotocol.com/glossary/action-approval/) [Human-control surface for AI authority Entity Passport At-a-glance identity for any agent / human / system / external app — verification status, authority profile, allowed capabilities, restricted…](https://kyeprotocol.com/glossary/entity-passport/) [Human-control surface for AI authority Authority Scope Three-way can / cannot / needs-approval breakdown for any entity.](https://kyeprotocol.com/glossary/authority-scope/) [Human-control surface for AI authority Critical Point Review Heavy-weight review for irreversible / regulated actions.](https://kyeprotocol.com/glossary/critical-point-review/) [Human-control surface for AI authority Evidence Timeline Replay-proof chain from proposal to execute-or-block.](https://kyeprotocol.com/glossary/evidence-timeline/) [Human-control surface for AI authority Approval Queue Multi-reviewer queue with pending / high-risk / escalations / second-approval-pending / SLA-breached / evidence-gap views.](https://kyeprotocol.com/glossary/approval-queue/) [Human-control surface for AI authority Authority Drift Detector Live drift events from the kye-drift-detector Worker (ten dimensions: intent, scope, state, payload, timing, frequency, target, semantic, agency,…](https://kyeprotocol.com/glossary/authority-drift/) [Human-control surface for AI authority Approval modes Locked set (§36 §6): none , single\_approver , two\_person , two\_person\_with\_legal , delegated , auto (forbidden at high+ risk).](https://kyeprotocol.com/glossary/approval-modes/) [Human-control surface for AI authority Meta-governance gate §36 §9 (LOCKED). Self-grants ( delegate\_authority or modify\_own\_authority where actor == grantee) are rejected at the PDP gate with reason\_code:…](https://kyeprotocol.com/glossary/meta-governance/) [Human-control surface for AI authority Critical-action catalogue Twenty action classes that trigger a signed, replay-proof approval flow: send\_email, send\_message, delete\_file, export\_data, access\_sensitive\_data,…](https://kyeprotocol.com/glossary/critical-actions/)

## Learn the terms in context: the academy.

[Open the academy](https://kyeprotocol.com/academy/) [Try the lab](https://kyeprotocol.com/lab/)